CN108563788A - Data query method, apparatus, server and storage medium based on block chain - Google Patents
Data query method, apparatus, server and storage medium based on block chain Download PDFInfo
- Publication number
- CN108563788A CN108563788A CN201810393489.1A CN201810393489A CN108563788A CN 108563788 A CN108563788 A CN 108563788A CN 201810393489 A CN201810393489 A CN 201810393489A CN 108563788 A CN108563788 A CN 108563788A
- Authority
- CN
- China
- Prior art keywords
- data
- target
- identification
- index value
- inquiry
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
- H04L9/3239—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
- G06F16/2228—Indexing structures
- G06F16/2264—Multidimensional index structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
- G06F16/2282—Tablespace storage structures; Management thereof
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
- G06F16/2458—Special types of queries, e.g. statistical queries, fuzzy queries or distributed queries
- G06F16/2471—Distributed queries
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/90—Details of database functions independent of the retrieved data types
- G06F16/901—Indexing; Data structures therefor; Storage structures
- G06F16/9024—Graphs; Linked lists
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Databases & Information Systems (AREA)
- Computer Hardware Design (AREA)
- Data Mining & Analysis (AREA)
- General Health & Medical Sciences (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Probability & Statistics with Applications (AREA)
- Mathematical Physics (AREA)
- Fuzzy Systems (AREA)
- Computational Linguistics (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a kind of data query methods based on block chain, device, server and storage medium, belong to network technique field, data query is combined by this method with block chain technology, when getting the request of user's inquiry data, according to user identifier and Data Identification, determine that user inquires the permission of the data based on data permission information, when determining that the user does not have the permission for inquiring the data, according to the target strategy in data permission information, obtain the inquiry license of multiple terminals, when the inquiry license got meets target strategy, data are obtained from storage system.This method improves safety and the privacy of data by the way that data permission information is arranged, while by the different target strategy of different data, improving the flexibility of data query authority setting, more safety and intelligence.
Description
Technical field
The present invention relates to network technique field, more particularly to a kind of data query method, apparatus based on block chain, service
Device and storage medium.
Background technology
With the development of network technology, the available business in internet is more and more, data volume caused by various businesses
Also it drastically expands, and in business procession, can be related to carrying out storage and inquiry based on storage to business datum.But
In the query process of data, data can be transmitted between devices, accordingly, it is possible to data can be caused to be tampered, reveal or
Situations such as stealing, compromise data safety, so how safely and efficiently to carry out data query becomes people's very concern.
Current data query method is the permission based on user account to carry out.When the number for receiving any user
When according to inquiry request, meeting is according to the corresponding permission of the user account, to judge whether the user can inquire a certain business datum,
To which when determining that the user has search access right, requested business datum business can be returned.
In the implementation of the present invention, the inventor finds that the existing technology has at least the following problems:
Current data query method carries out data query according only to the permission of user account, can not be to different data
The search access right of different stage is set, causes safety when data query low, flexibility is poor.
Invention content
In order to solve problems in the prior art, an embodiment of the present invention provides a kind of data query sides based on block chain
Method, device, server and storage medium.The technical solution is as follows:
On the one hand, a kind of data query method based on block chain is provided, the method includes:
According to inquiry request, the Data Identification of the first data to be checked is obtained, the inquiry request, which carries, initiates inquiry
The user identifier of request;
According to the Data Identification, the data permission letter in the target block chain in block catenary system in target block is obtained
Breath;
When the data permission information does not include the user identifier, at least one of block catenary system mesh
It marks node and sends inquiry license request, the inquiry license request carries the user identifier and the Data Identification;
When the inquiry permission response received meets the target strategy in the data permission information, according to the data
Mark, obtains first data from data-storage system.
On the one hand, a kind of data query arrangement based on block chain is provided, described device includes:
Data Identification acquisition module, it is described for according to inquiry request, obtaining the Data Identification of the first data to be checked
Inquiry request carries the user identifier for initiating inquiry request;
Data permission data obtaining module, for according to the Data Identification, obtaining in target block chain in target block
Data permission information;
Sending module is used for when the data permission information does not include the user identifier, to the block catenary system
At least one of destination node send inquiry license request, the inquiry license request carrying user identifier and the number
According to mark;
Data acquisition module, for meeting the target plan in the data permission information when the inquiry permission response received
When slightly, according to the Data Identification, first data are obtained from data-storage system.
On the one hand, a kind of server is provided, the server includes processor and memory, is stored in the memory
There are at least one instruction, described instruction to be loaded by the processor and executed to realize such as the above-mentioned data query based on block chain
Operation performed by method.
On the one hand, a kind of computer readable storage medium is provided, at least one instruction is stored in the storage medium,
Described instruction is loaded by processor and is executed to realize the operation as performed by the above-mentioned data query method based on block chain.
The advantageous effect that technical solution provided in an embodiment of the present invention is brought is:
By when getting the request of user's inquiry data, determining that user inquires the data based on data permission information
Permission, according to the common recognition strategy in data permission information, obtains looking into for multiple nodes when it is data owner to determine the user
License is ask, when the inquiry license got meets target strategy, data are obtained from data-storage system.This method is by setting
Safety and privacy that data permission information improves data are set, while can be the different target strategy of different data, is carried
The flexibility for having risen data query authority setting is allowed to more safety and intelligence.
Description of the drawings
To describe the technical solutions in the embodiments of the present invention more clearly, make required in being described below to embodiment
Attached drawing is briefly described, it should be apparent that, drawings in the following description are only some embodiments of the invention, for
For those of ordinary skill in the art, without creative efforts, other are can also be obtained according to these attached drawings
Attached drawing.
Fig. 1 is a kind of structural schematic diagram of data-storage system provided in an embodiment of the present invention;
Fig. 2 is a kind of flow chart of data query method based on block chain provided in an embodiment of the present invention;
Fig. 3 is a kind of schematic diagram of data storage procedure provided in an embodiment of the present invention;
Fig. 4 is a kind of schematic diagram of data query process provided in an embodiment of the present invention;
Fig. 5 is a kind of structural schematic diagram of data query arrangement based on block chain provided in an embodiment of the present invention;
Fig. 6 is a kind of schematic diagram of server provided in an embodiment of the present invention.
Specific implementation mode
To make the object, technical solutions and advantages of the present invention clearer, below in conjunction with attached drawing to embodiment party of the present invention
Formula is described in further detail.
In the following, following some nouns occurred in the process that illustrate are introduced:
Intelligent contract:The contract program executed automatically according to specified conditions is that user interacts with block chain, utilizes area
Block chain realizes the important channel of service logic.For example, each mechanism can pass through the intelligence on the block chain disposed in server
Contract accesses the data-storage system, the functions such as the data storage to use the data-storage system to provide and data query.
Target strategy:The target strategy can be one kind of common recognition strategy, such as endorsement strategy, can serve to indicate that data
The necessary condition that process of endorsing in storage system need to meet.For example, the endorsement strategy can indicate the multiple endorsements for needing to endorse
Node, forms an endorsement node set, and endorsement process then needs the coalition signature of the endorsement node set.
Fig. 1 is a kind of structural schematic diagram of data-storage system provided in an embodiment of the present invention.The system includes multiple clothes
Business device 101, multiple storage devices 102;
Wherein, multiple servers 101 can be configured with same block chain, that is to say, multiple server 101 can group
At block catenary system, each server 101 is respectively the node in the block catenary system.Multiple server 101 can be same
Multiple servers of one mechanism can also be the multiple servers for belonging to different institutions, for example, can be wrapped in the block catenary system
Include the server of each section office of hospital;Certainly, can also include server, the bank of insurance institution in the block catenary system
Server etc..The user of each mechanism can be by terminal 1011 come the server of access mechanism, multiple terminal device
1011 can be the electronic equipment for being able to access that multiple server 101, which can be computer, smart mobile phone, put down
Plate computer or other electronic equipments.
Certainly, in order to carry out the services such as safety verification, rights management, the centers CA are configured in block catenary system
(Certificate Authority, certificate authority) 103, the key for storing each mechanism, in block catenary system
Each server can obtain the key of each mechanism from the centers CA, with processes such as the encryption and the decryption that carry out data.It is multiple
Storage device 102 is used to provide storage service for multiple server 101, it should be noted that multiple storage device 102 can
To form distributed memory system, for storing data to providing using distributed form.
Based on the implementation environment provided in above-mentioned Fig. 1, when terminal has data storage requirement, block linkwork can be passed through
The there is provided memory mechanism of system, data are stored in the storage device into distributed system, to facilitate subsequent query, below it is right
Storing process and query process are introduced, and Fig. 2 is a kind of data query side based on block chain provided in an embodiment of the present invention
The flow chart of method, the executive agent of this method can be the server in block catenary system, and referring to Fig. 2, this method may include:
201, when server receives data storage request, based on the primary data corresponding to the data storage request,
The first data are generated, the data lengths of first data is preset data length, and the dimension and data directory of first data
Data dimension in information table is corresponding.
It, can be to data storage request pair for the ease of subsequent storage and inquiry when server needs to store data
The primary data answered is standardized, which includes two parts, first, each dimension to primary data is standardized,
Second is that standardizing to data length.Specifically, which may include following step one to step 3:
Step 1: data information of the primary data in each dimension is converted to corresponding index value, it is first to obtain this
The index value of the different dimensions of beginning data.
It, can be with the information in multiple and different dimensions, therefore, in order to enable the table of data for primary data
It is unified up to mode, data information of the primary data in each dimension can be converted to standard figures, to express different dimensional
Data information on degree.For example, for a mood profile, dimension may include gender dimension and section office's dimension,
In, gender dimension includes male, women, and section office's dimension includes internal medicine, surgery and ophthalmology etc..
It should be noted that when being converted, primary data is specifically converted to the index value of which dimension, can be based on
The corresponding data indexing information table of the primary data determines that different types of primary data can correspond to different data index letter
Table is ceased, for example, the mood profile of hospital can correspond to the data indexing information table of the hospital, correspondingly, to the hospital
When mood profile converts, then it can be turned according to multiple dimensions defined in the data indexing information table of the hospital
It changes.It is to be converted when not reading determining, it can determine data indexing information table according to data essential information of primary data etc..
Wherein, different data essential information can be used to indicate that the ownership mechanism of primary data, different essential informations can correspond to not
With the data indexing information table of mechanism.
By taking data indexing information table as an example, data indexing information table includes the Data Identification and different dimensional for having stored data
Index value on degree, wherein different dimensions are used to indicate the different classes of of data, and the index value in dimension is used to indicate dimension institute
Including range.The format that BitMap (bitmap file) may be used in the data indexing information table is stored in data-storage system
In.It, can be in first Data Identification when the first data belong to the index value on certain dimension in data indexing information table
Record 1 in the cell of the index value of corresponding dimension, when certain that the first data are not belonging in data indexing information table is one-dimensional
When index value on degree, 0 can be recorded in the cell of the index value of the dimension corresponding to first Data Identification, the present invention
Embodiment is to this without specifically limiting.
For example, when the index information table of the first data is the index information table of mood profile's data in hospital, the dimension
Can be gender dimension or section office's dimension etc., wherein the index value of gender dimension can man and female, the index value in section office's dimension
Can be internal medicine, surgery and ophthalmology etc., the embodiment of the present invention is to this without specifically limiting.The Data Identification of the mood profile can
The Xn etc. that thinks X1, X2, X3, X4, X5, X6 ..., the index letter in storage system can be as shown in table 1 below:
Table 1
Usually, the index value value of the dimension defined in above-mentioned concordance list can be provided by enumerating, be that is to say,
All possible index value in one dimension is provided, certainly, if not enumerating the data in range, management user can be prompted
It modifies.
Step 2: when the data length of the primary data is less than the preset data length, filled out after the primary data
Fill preset data.
Each data are converted into the identical data of data length, can make data that there is a set pattern in storage
Rule, deviation post when data store can be determined according to the number of data length and interval data, substantially increase inquiry
Efficiency.
Since the size of primary data may be shorter than preset data length, then insufficient part can be filled out by preset data
It fills, it, can be directly to one when the updates such as modifying, deleting and replacing so that the size of data is consistent
It modifies to realize in section continuation address space.The preset data can be one section of default value etc., such as continuous multiple numbers
0。
Step 3: the index value of the different dimensions based on the primary data and the data after filling, generate first data.
202, server obtains the data permission information of the first data to be stored, and according to the mesh in data permission information
Mark strategy, obtains the public key of each destination node in the target strategy of the data permission information of first data, to first number
According to being encrypted, encryption data is obtained.
In the embodiment of the present invention, the data permission information of first data can also be set when storing the first data, it should
Setting up procedure can be that server obtains the corresponding data permission information of the server, can also be the client by being stored
User is arranged according to self-demand, the data permission information can be user be first data setting can inquire this first
The permission of the user of data.It is, of course, also possible to be to obtain data permission information automatically according to data self attributes.For example, with doctor
For the mood profile of institute, when needing to store mood profile, data permission information can be set to only user with
And each section office can check.And by taking the Payment Records of user as an example, data permission information can be set to only user, each
Section office and Send only Account institutional affiliation can be checked.
Further, may include Data Identification, the correspondence of first data in the data permission information of first data
Have be directly viewable first data permission user identifier and first data target strategy etc., the target strategy
Including at least the multiple destination nodes and common recognition success conditions etc. known together for first data.Such as, when the clothes in hospital
When first data of business device storage are mood profile, the attending physician that can set the patient and the patient has the inquiry patient
The permission of archives, using the archives label of the mood profile as the Data Identification of first data, in the permission of the mood profile
It may include the user identifier of the archives label, the user identifier of patient and the patient attending physician.It optionally, can also be
Target strategy is stored in the data permission information of the mood profile, e.g., when checking that the user identifier of the mood profile is not belonging to this
When the user identifier of Patient identification and the patient attending physician, this can be checked when getting the license of multiple destination nodes
Mood profile.
Based on the above, in step 202, after getting data permission information, server can obtain data power
The node identification of each destination node in target strategy in limit information, and based on the node identification of each destination node, from
In the centers CA, the public key of each destination node is obtained, which is encrypted, encryption data is obtained.
This can be based on certain sequence based on the process that multiple public keys are encrypted and carry out, and that is to say, sequentially use this more
A public key carries out multi-enciphering, to obtain data to be stored to first data.Certainly, which can be stored in
In data permission information, in order to which subsequently when being decrypted, inverted order decryption is carried out according to the encryption order.
203, the Data Identification and the index value on different dimensions that server extracts first data.
204, the index value on the Data Identification and different dimensions of first data is added to the data rope by server
Draw in information table, updates the data indexing information table in the data-storage system, and the encryption data is stored to the data and is deposited
In storage system, which includes the index value on the Data Identification and different dimensions for stored data.
Before being encrypted, for the ease of subsequent inquiry, it is also necessary to be indexed extraction and the data directory of value
The update of information table, so that data-storage system can be inquired according to the data of actual storage in real time.
205, the data of Data Identification of the server based on first data, data permission information and the encryption data are special
Value indicative generates target block, which is added the target block chain.
Specifically, when generating target block and target block chain being added in target block, block catenary system can be passed through
Interior common recognition mechanism carries out, and can be related to interacting with each other between multiple servers in system, the embodiment of the present invention to this not
It repeats.
The process of the step 201 to 205 can essentially be summarized as the flow such as Fig. 3, that is to say, when storing data,
Endorsement strategy can be set first and is standardized to data, then can be indexed extraction parallel and data are multiple
Encrypted process, in ciphering process, the interaction being related between the centers CA, finally, after the index being drawn into and encryption
Data correspondence store to data-storage system, in the process, also relate to the update to data indexing information table.
206, server obtains the Data Identification of the first data to be checked, the inquiry according to the inquiry request received
Request carries the user identifier for initiating inquiry request.
User can trigger inquiry request by login service device, such as use the archives label of oneself as login account
Inquire the mood profile etc. of oneself.When carrying Data Identification in the inquiry request, which is determined
For the Data Identification of the first data to be checked, e.g., the server in hospital's block catenary system, which obtains, inquires a certain mood profile
Inquiry request, it is when carrying the archives label of the mood profile in the inquiry request, the archives label is to be checked as this
The Data Identification for the first data ask.
It further, can be according to number when the inquiry request that server is got is to inquire the request of certain a kind of data
According to the index information table of the first data in storage system, the Data Identification of first data to be checked is obtained, it is specific to obtain
The method of the Data Identification such as following step 206A-206B.
206A, server obtain the querying condition information in the inquiry request, which includes at least one
The target index value of target dimension;
When the inquiry request that server is got is querying condition information, determine that the dimension in the querying condition information is
Target dimension determines that the index value of dimension in the querying condition information is target index value.Such as, which can be male
Dimension, the target index value can be that the index value of male's dimension is 1, when target dimension is internal medicine dimension, target index
Value can be that the index value of internal medicine dimension is 1 etc., and the embodiment of the present invention is to this without specifically limiting.Certainly, in querying condition
May include the target index value of two or more dimensions in information, for example, target dimension can be male's dimension and
Internal medicine dimension, then target index value can be that the index value of male's dimension is 1 and the index value of internal medicine dimension is 1.
206B, the target index value according at least one target dimension, inquire the data rope in the data-storage system
Draw information table, obtains the Data Identification of first data.
When the number of the target index value of at least one target dimension is 1, according to the target rope of a target dimension
Draw value, from the data indexing information table, obtains at least one first Data Identification, the target dimension of each first Data Identification
Index value be equal to the target index value.For example, when the target dimension rope in the querying condition information that hospital server is got
Draw value be women when, in data indexing information table search dimension be gender dimension, index value be women list, and extract should
The Data Identification corresponding to 1 cell is recorded as in table.As shown in table 2 below, when the target index value in querying condition information
For women when, the Data Identifications of the first obtained data is X2, X3, X5, X6 and Xn.
Table 2
X1 | X2 | X3 | X4 | X5 | X6 | X7 | … | Xn | ||
Gender dimension | Women | 0 | 1 | 1 | 0 | 1 | 1 | 0 | … | 1 |
Further, when the number of the target index value of at least one target dimension is at least two, extremely according to this
The target index value of few two target dimensions obtains at least one second Data Identification, each from the data indexing information table
The multiplying equal at least two targets index value with operation of the index value of at least two target dimension of the second Data Identification
Product.For example, when the target dimension index value in the querying condition information that hospital server is got is women and ophthalmology, in number
It is women according to the index value that dimension is gender dimension is searched in index information table, the index value of section office's dimension is the list of ophthalmology,
When the product of numbers recorded in the cell of two list same rows is 1, the corresponding Data Identification of the row is extracted.Such as the following table 3
Shown, when the target index value in querying condition information is women and ophthalmology, the Data Identification of the first obtained data is X3.
Table 3
X1 | X2 | X3 | X4 | X5 | X6 | X7 | … | Xn | ||
Gender dimension | Women | 0 | 1 | 1 | 0 | 1 | 1 | 0 | … | 1 |
Section office's dimension | Ophthalmology | 1 | 0 | 1 | 1 | 0 | 0 | 0 | … | 0 |
207, server obtains the data permission information in target block in target block chain, sentences according to the Data Identification
Whether the data permission information of breaking includes the user identifier, if so, step 210 is executed, if not, executing step 208.
The target block refers to that the block of the Data Identification is stored in target block chain.In embodiments of the present invention, when
Server gets inquiry request input by user, and when determining the Data Identification of first data according to the inquiry request, clothes
Device be engaged in the target block of the target block chain of its configuration, according to the Data Identification, determines the data permission of first data
Information, when the data permission information of first data includes the user identifier that the inquiry request carries, server executes step
Rapid 210, which is obtained from data-storage system according to the user identifier.Such as, when the server of hospital gets use
Family determines the Data Identification of the women ophthalmology mood profile according to the inquiry request to the inquiry request of women ophthalmology mood profile
For X3 when, server can its configuration target block chain target block in, according to Data Identification X3, determine the patient
The data permission information of archives may include user identifier, the patient attending physician of ophthalmology director in the data permission information
User identifier or the patient user identifier etc., the embodiment of the present invention to this without specifically limiting, when server is got
Inquiry request in the user identifier that carries when being the user identifier of ophthalmology director, server can be according to the use of ophthalmology director
Family identifies and the data permission information of the mood profile, determines that ophthalmology director has the permission for inquiring the mood profile.Certainly,
The user identifier of personal user is used when the example above to limit data permission information, in actual scene, the data permission
Included by information can also be node identification or authority identification etc., and the search access right of the data is opened to respective nodes
Or corresponding mechanism, the embodiment of the present invention are not specifically limited this.
Further, when the user identifier in the data permission information of first data not including inquiry request carrying
When, server executes step 208.
208, server sends inquiry license request, inquiry license at least one destination server of block catenary system
Request carries the user identifier and the Data Identification.
When the user identifier in the data permission information that server determines first data not including inquiry request carrying
When, server sends inquiry request at least one destination server, which can be block linkwork
At least one of system destination node.Further, which can be target defined by target strategy
Node will know together and be limited in several nodes, reduce the Signalling exchange quantity in block catenary system.
209, server judges whether inquiry license meets the data permission information when receiving inquiry permission response
In target strategy, if so, continue to execute step 210, if not, stopping obtaining first data.
In embodiments of the present invention, when server receives the inquiry license request that at least one server is beamed back,
According to the server identification of at least one server carried in the inquiry license request, check that the server of query with permission is
The requirement of target strategy in the no data permission information for meeting the data.For example, when target strategy requires all destination services
Device is required to return to inquiry permission response, can provide the inquiry of the first data, then server needs are receiving all mesh
When marking the inquiry permission response of server, the first data are provided for current query process.In another example when target strategy requires only
There is certain several destination server to return to inquiry permission response, then the inquiry of the first data can be provided, as long as then server connects
When receiving the inquiry permission response that several destination servers return, the inquiry of the first data is provided.
Illustrated with an example, when in the block catenary system of hospital including m tissue, this m server organized
Server identification can be:The format of U1, U2, U3, U4 ... Um, the endorsement success conditions in the target strategy can be AND
(U1, U2, U3), at this time the target strategy be used to indicate when server gets three that server identification is U1 and U2 and U3
When the inquiry license that server is sent, first data can be inquired.Optionally, the endorsement success conditions in the target strategy are also
Can be AND (U1, OR (U2, U3)), the target strategy is used to indicate at this time, is U1 when server gets server identification
Server and server identification when being the inquiry license that any one or two servers in U2 or U3 are sent, Ke Yiwei
This inquiry returns to the first data, and the embodiment of the present invention is to this without specifically limiting.
When the inquiry permission response that server receives does not meet the target strategy in the data permission information, then do not hold
Row obtains the step of first data.When the inquiry permission response that server receives meets the target in the data permission information
When tactful, following processes for inquiring first data are continued to execute.
Further, when server determination cannot obtain first data, which can also show no inquiry
The prompt message of permission, the permission for inquiring the data to remind user not have.
210, server based on data identifies, and the first data are obtained from data-storage system.
In embodiments of the present invention, when the inquiry permission response that server receives meets the mesh in the data permission information
When mark strategy, first data are obtained, the process for specifically obtaining first data includes the following steps 210A-210C.
210A, server determine in first Data Identification and the data indexing information table between first Data Identification
Relative position.
When server can inquire first data, according to the Data Identification of first data, in data-storage system
Data indexing information table where the middle Data Identification for inquiring first data, and obtain the data in the data indexing information table
Position in position and the data indexing information table where identifying where first Data Identification, to according to two numbers
According to mark position, determines the relative position between two Data Identifications, that is to say, be spaced between two Data Identifications several
A Data Identification.As shown in table 4 below, when the Data Identification of the first data is X3, the position of X1 in table 3 is obtained, so that it is determined that
Relative position between X1 and X3.
Table 4
X1 | X2 | X3 | X4 | X5 | X6 | X7 | … | Xn | ||
Gender dimension | Women | 0 | 1 | 1 | 0 | 1 | 1 | 0 | … | 1 |
Section office's dimension | Ophthalmology | 1 | 0 | 1 | 1 | 0 | 0 | 0 | … | 0 |
210B, server determine first data in the first file according to the relative position and preset data length
Deviation post, first file are the corresponding file of data indexing information table.
The storage location and the deviation post of 210C, server according to first file in the data-storage system, from
First data are obtained in the data-storage system.
Position in the data indexing information table where first Data Identification is the storage start bit of first file
It sets, and after relative position is determined, it can determine first data and first according to relative position and preset data length
The difference of storage address between the corresponding data of Data Identification, the difference of the storage address are the first data in the first file
Deviation post, and due to the storage initial position of the first file it is known that can then know the actual storage locations of first data,
And the acquisition of data is carried out based on the actual storage locations.
This inquiry based on relative position, can greatly improve the speed of data acquisition, reduce answering for query process
Polygamy improves query rate.
211, server verifies the first data according to the data feature values stored in target block.
In embodiments of the present invention, when server gets the first data from data-storage system, first, according to obtaining
The first data got generate the characteristic value of first data, and according to the Data Identification of first data, in target block chain
Target block in, the data feature values stored in the target block are extracted, when the characteristic value of the generation characteristic value and the extraction
When identical, then to the verification of the first data success, if it is not the same, then verifying failure.According to characteristic value to get first
Data are verified, it is ensured that the first data got are not tampered in storage and query process.When server pair
When first data check success, execute subsequently to the decryption step of data, when server fails to first data check,
Illustrate that first data are tampered, does not continue to execute subsequently to the decryption step of data.
212, private key pair first data of the server based on each server are decrypted, and obtain the business number after decryption
According to.
In embodiments of the present invention, since the data that data-storage system is stored are encryption data, work as server
After getting the first data, it is also necessary to first data be decrypted, specific decrypting process such as following step 212A-
212B。
212A, the private key for obtaining each server in target strategy.
When server determines that first data are not tampered with, according to the target strategy in the data permission, determining pair
The server identification for multiple servers that the data are known together, and according to the server identification of multiple server, from CA
The heart obtains the private key of each server.
First data are decrypted in 212B, the private key based on each server, and the industry after decryption is returned to server
Business data.
When getting the private key of each server, determine that each server adds first data according to target strategy
Close sequence, then according to the private key of each server got, according to encryption order reverse sequence to first data into
Row decryption when successful decryption, and returns to the business datum after decryption.
It should be noted that the first data refer to the data being currently queried in the above process, certainly, above-mentioned data also may be used
Be referred to as the second data or other, it is not limited in the embodiment of the present invention.
The detailed process of above-mentioned inquiry can be summarized as the flow such as Fig. 4, when endorsement is determined based on data permission information
After strategy, endorsement strategy can be based on and judge whether to this inquiry, when determining that carrying out this inquires, the rope based on inquiry
Draw, by query engine, to inquire the first data in data-storage system, and then the private key provided by the centers CA, logarithm
According to the business datum after decrypting is returned after being decrypted, with rapid inquiry while realizing search access right control.
Method provided in an embodiment of the present invention, by when getting the request of user's inquiry data, being based on data permission
Information determines that user inquires the permission of the data, when it is data owner to determine the user, according in data permission information
Common recognition strategy obtains the inquiry license of multiple nodes, when the inquiry license got meets target strategy, is from data storage
Data are obtained in system.This method improves safety and the privacy of data by the way that data permission information is arranged, while can be
The different target strategy of different data, improves the flexibility of data query authority setting, is allowed to more safety and intelligence.
Fig. 5 is a kind of structural schematic diagram of data query arrangement based on block chain provided in an embodiment of the present invention.Referring to
Fig. 5, the device include:
Data Identification acquisition module 501, for according to inquiry request, obtaining the Data Identification of the first data to be checked,
The inquiry request carries the user identifier for initiating inquiry request;
Data permission data obtaining module 502, for according to the Data Identification, obtaining in target block chain in target block
Data permission information;
Sending module 503 is used for when the data permission information does not include the user identifier, into the block catenary system
At least one destination node sends inquiry license request, which carries the user identifier and the Data Identification;
Data acquisition module 504, for meeting the target in the data permission information when the inquiry permission response received
When tactful, according to the Data Identification, first data are obtained from data-storage system.
In a kind of possible realization method, which is additionally operable to when the data permission information include the use
When family identifies, according to the Data Identification, first data are obtained from the data-storage system.
In a kind of possible realization method, which is used for:
The querying condition information in the inquiry request is obtained, which includes the mesh of at least one target dimension
Mark index value;
According to the target index value of at least one target dimension, the data indexing information in the data-storage system is inquired
Table obtains the Data Identification of first data, which includes the Data Identification and difference for having stored data
Index value in dimension.
In a kind of possible realization method, which is used for:
When the number of the target index value of at least one target dimension is for the moment, according to the target rope of a target dimension
Draw value, from the data indexing information table, obtains at least one first Data Identification, the target dimension of each first Data Identification
Index value be equal to the target index value;Or,
When the number of the target index value of at least one target dimension is at least two, tieed up according at least two targets
The target index value of degree obtains at least one second Data Identification, each second Data Identification from the data indexing information table
At least two target dimension index value product be equal at least two targets index value product.
In a kind of possible realization method, the data acquisition module 504, for determining the Data Identification and the data directory
Relative position in information table between first Data Identification;
According to the relative position and preset data length, the deviation post of first data in the first file is determined, it should
First file is the corresponding file of data indexing information table;
According to the storage location of first file in the data-storage system and the deviation post, system is stored from the data
First data are obtained in system.
In a kind of possible realization method, which further includes:
Correction verification module, for according to the data feature values stored in the target block, being verified to first data;
When verifying successfully, execute subsequently to the decryption step of data;When verifying failure, do not execute subsequently to data
Decryption step.
In a kind of possible realization method, which further includes deciphering module, for obtaining each mesh in the target strategy
Mark the private key of node;First data are decrypted in private key based on each destination node, return to the business number after decryption
According to.
In a kind of possible realization method, which is used for the encryption according to each destination node in the target strategy
Sequentially, it uses the private key of each destination node that first data are decrypted one by one, returns to the business datum after decryption.
In a kind of possible realization method, which further includes:
Acquisition module obtains the data permission information of the first data to be stored for receiving data storage request;
Encrypting module, the public affairs of each destination node in the target strategy of the data permission information for obtaining first data
Key is encrypted first data, obtains encryption data;
Update module, for according to the data indexing information table in first data update data-storage system, and will
The encryption data is stored into the data-storage system, the data indexing information table include stored data Data Identification and
Index value on different dimensions;
Processing module, the number for Data Identification, data permission information and the encryption data based on first data
According to characteristic value, target block is generated, which is added the target block chain.
In a kind of possible realization method, the update module, the Data Identification for extracting first data and difference
Index value in dimension;Index value on the Data Identification and different dimensions of first data is added to data directory letter
It ceases in table.
In a kind of possible realization method, which further includes:Data normalization module is asked for being based on the data storage
Seek corresponding primary data, generate first data, the data length of first data is preset data length, and this first
The dimension of data is corresponding with the data dimension in the data indexing information table.
In a kind of possible realization method, which is used for the primary data in each dimension
Data information is converted to corresponding index value, obtains the index value of the different dimensions of the primary data;When the number of the primary data
When being less than the preset data length according to length, preset data is filled after the primary data;Difference based on the primary data
The index value of dimension and the data after filling generate first data.
Device provided in an embodiment of the present invention, by when getting the request of user's inquiry data, being based on data permission
Information determines that user inquires the permission of the data, when it is data owner to determine the user, according in data permission information
Common recognition strategy obtains the inquiry license of multiple nodes, when the inquiry license got meets target strategy, is from data storage
Data are obtained in system.This method improves safety and the privacy of data by the way that data permission information is arranged, while can be
The different target strategy of different data, improves the flexibility of data query authority setting, is allowed to more safety and intelligence.
The alternative embodiment that any combination forms the disclosure may be used, herein no longer in above-mentioned all optional technical solutions
It repeats one by one.
Fig. 6 is a kind of schematic diagram of server provided in an embodiment of the present invention, which can be because of configuration or performance not
With and generate bigger difference, may include one or more processors (central processing units,
CPU) 601 and one or more memory 602, wherein at least one instruction, institute are stored in the memory 602
At least one instruction is stated to be loaded by the processor 601 and executed to realize that above-mentioned each embodiment of the method provides based on block
The data query method of chain.Certainly, which can also have wired or wireless network interface, keyboard and input and output to connect
The components such as mouth, to carry out input and output, which can also include other components for realizing functions of the equipments, herein not
It repeats.
In the exemplary embodiment, a kind of computer readable storage medium, such as the memory including instruction are additionally provided,
Above-metioned instruction can be executed by the processor in terminal to complete the data query method based on block chain in above-described embodiment.Example
Such as, the computer readable storage medium can be ROM, random access memory (RAM), CD-ROM, tape, floppy disk and light number
According to storage device etc..
One of ordinary skill in the art will appreciate that realizing that all or part of step of above-described embodiment can pass through hardware
It completes, relevant hardware can also be instructed to complete by program, the program can be stored in a kind of computer-readable
In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..
The foregoing is merely presently preferred embodiments of the present invention, is not intended to limit the invention, it is all the present invention spirit and
Within principle, any modification, equivalent replacement, improvement and so on should all be included in the protection scope of the present invention.
Claims (15)
1. a kind of data query method based on block chain, which is characterized in that the method includes:
According to inquiry request, the Data Identification of the first data to be checked is obtained, the inquiry request, which carries, initiates inquiry request
User identifier;
According to the Data Identification, the data permission information in target block in the target block chain in block catenary system is obtained;
When the data permission information does not include the user identifier, at least one of block catenary system target section
Point sends inquiry license request, and the inquiry license request carries the user identifier and the Data Identification;
When the inquiry permission response received meets the target strategy in the data permission information, according to the data mark
Know, first data are obtained from data-storage system.
2. according to the method described in claim 1, it is characterized in that, described according to the Data Identification, acquisition block catenary system
In target block chain in after data permission information in target block, the method further includes:
When the data permission information includes the user identifier, according to the Data Identification, from the data-storage system
It is middle to obtain first data.
3. according to the method described in claim 1, it is characterized in that, the request based on the query, obtains the first number to be checked
According to Data Identification include:
The querying condition information in the inquiry request is obtained, the querying condition information includes the mesh of at least one target dimension
Mark index value;
According to the target index value of at least one target dimension, the data indexing information in the data-storage system is inquired
Table, obtains the Data Identification of first data, the data indexing information table include stored data Data Identification and
Index value on different dimensions.
4. according to the method described in claim 3, it is characterized in that, the target rope according at least one target dimension
Draw value, inquire data indexing information table, the Data Identification for obtaining first data includes:
When the number of the target index value of at least one target dimension is for the moment, to be indexed according to the target of a target dimension
Value obtains at least one first Data Identification, the target dimension of each first Data Identification from the data indexing information table
Index value be equal to the target index value;Or,
When the number of the target index value of at least one target dimension is at least two, according at least two target dimensions
Target index value obtain at least one second Data Identification, each second Data Identification from the data indexing information table
At least two target dimension index value product be equal at least two targets index value product.
5. according to the method described in claim 1, it is characterized in that, described according to the Data Identification, from data-storage system
It is middle to obtain first data and include:
Determine the relative position between first Data Identification in the Data Identification and the data indexing information table;
According to the relative position and preset data length, deviation post of first data in the first file, institute are determined
It is the corresponding file of the data indexing information table to state the first file;
According to storage location of first file in the data-storage system and the deviation post, deposited from the data
First data are obtained in storage system.
6. according to the method described in claim 1, it is characterized in that, described according to the Data Identification, from data-storage system
After middle acquisition first data, the method further includes:
According to the data feature values stored in the target block, first data are verified;
When verifying successfully, execute subsequently to the decryption step of data;When verifying failure, the decryption subsequently to data is not executed
Step.
7. according to the method described in claim 1, it is characterized in that, described obtain first data from data-storage system
Later, the method further includes:
Obtain the private key of each destination node in the target strategy;
First data are decrypted in private key based on each destination node, return to the business datum after decryption.
8. the method according to the description of claim 7 is characterized in that the private key based on each destination node is to described
First data are decrypted, and return to the business datum after decryption and include:
According to the encryption order of each destination node in the target strategy, the private key pair of each destination node is used one by one
First data are decrypted, and return to the business datum after decryption.
9. according to the method described in claim 1, it is characterized in that, the method further includes:
Data storage request is received, the data permission information of the first data to be stored is obtained;
The public key for obtaining each destination node in the target strategy of the data permission information of first data, to first number
According to being encrypted, encryption data is obtained;
It is deposited according to the data indexing information table in data-storage system described in first data update, and by the encryption data
In storage to the data-storage system, the data indexing information table includes the Data Identification and different dimensions for having stored data
On index value;
The data feature values of Data Identification, data permission information and the encryption data based on first data generate
The target block chain is added in the target block by target block.
10. according to the method described in claim 9, it is characterized in that, described according to second file of the first data update
Data indexing information table includes:
The Data Identification and the index value on different dimensions for extracting first data;
Index value on the Data Identification and different dimensions of first data is added in the data indexing information table.
11. according to the method described in claim 9, it is characterized in that, after the reception data storage request, the method is also
Including:
The corresponding primary data of storage request based on the data, generates first data, the data of first data
Length is preset data length, and the dimension of first data is opposite with the data dimension in the data indexing information table
It answers.
12. according to the method for claim 11, which is characterized in that first corresponding to the request of storage based on the data
Beginning data, generating first data includes:
Data information of the primary data in each dimension is converted into corresponding index value, obtains the primary data
The index value of different dimensions;
When the data length of the primary data is less than the preset data length, filled after the primary data default
Data;
The index value of different dimensions based on the primary data and the data after filling generate first data.
13. a kind of data query arrangement based on block chain, which is characterized in that described device includes:
Data Identification acquisition module, for according to inquiry request, obtaining the Data Identification of the first data to be checked, the inquiry
Request carries the user identifier for initiating inquiry request;
Data permission data obtaining module, for according to the Data Identification, obtaining the number in target block in target block chain
According to authority information;
Sending module is used for when the data permission information does not include the user identifier, into the block catenary system
At least one destination node sends inquiry license request, and the inquiry license request carries the user identifier and the data mark
Know;
Data acquisition module, for meeting the target strategy in the data permission information when the inquiry permission response received
When, according to the Data Identification, first data are obtained from data-storage system.
14. a kind of server, which is characterized in that the server includes processor and memory, is stored in the memory
At least one instruction, described instruction are loaded by the processor and are executed to realize as claim 1 is any to claim 12
The operation performed by the data query method based on block chain described in.
15. a kind of computer readable storage medium, which is characterized in that be stored at least one instruction, institute in the storage medium
Instruction is stated to be loaded by processor and executed to realize such as claim 1 to claim 12 any one of them based on block chain
Operation performed by data query method.
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201911206702.4A CN110990407B (en) | 2018-04-27 | 2018-04-27 | Block chain based data storage method and device, server and storage medium |
CN201810393489.1A CN108563788B (en) | 2018-04-27 | 2018-04-27 | Block chain-based data query method, device, server and storage medium |
PCT/CN2019/079636 WO2019205860A1 (en) | 2018-04-27 | 2019-03-26 | Blockchain-based data query method, server and storage medium |
US16/907,580 US11366924B2 (en) | 2018-04-27 | 2020-06-22 | Block chain-based data query method, server and storage medium |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810393489.1A CN108563788B (en) | 2018-04-27 | 2018-04-27 | Block chain-based data query method, device, server and storage medium |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201911206702.4A Division CN110990407B (en) | 2018-04-27 | 2018-04-27 | Block chain based data storage method and device, server and storage medium |
Publications (2)
Publication Number | Publication Date |
---|---|
CN108563788A true CN108563788A (en) | 2018-09-21 |
CN108563788B CN108563788B (en) | 2023-05-23 |
Family
ID=63537130
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201810393489.1A Active CN108563788B (en) | 2018-04-27 | 2018-04-27 | Block chain-based data query method, device, server and storage medium |
CN201911206702.4A Active CN110990407B (en) | 2018-04-27 | 2018-04-27 | Block chain based data storage method and device, server and storage medium |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201911206702.4A Active CN110990407B (en) | 2018-04-27 | 2018-04-27 | Block chain based data storage method and device, server and storage medium |
Country Status (3)
Country | Link |
---|---|
US (1) | US11366924B2 (en) |
CN (2) | CN108563788B (en) |
WO (1) | WO2019205860A1 (en) |
Cited By (35)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109213797A (en) * | 2018-09-30 | 2019-01-15 | 中国联合网络通信集团有限公司 | A kind of querying method and device of block chain |
CN109325870A (en) * | 2018-10-10 | 2019-02-12 | 上海保险交易所股份有限公司 | The method and system of shared private data |
CN109361738A (en) * | 2018-09-25 | 2019-02-19 | 安徽灵图壹智能科技有限公司 | A kind of identity authorization system and method based on block chain network |
CN109493093A (en) * | 2018-09-26 | 2019-03-19 | 百度在线网络技术(北京)有限公司 | User behavior information processing method and device based on block chain |
CN109559231A (en) * | 2018-12-29 | 2019-04-02 | 华东师范大学 | A kind of retrospect querying method towards block chain |
CN109558422A (en) * | 2018-10-29 | 2019-04-02 | 平安科技(深圳)有限公司 | Based on the driver's license archive management method of block chain, device, computer equipment |
CN109558750A (en) * | 2018-11-30 | 2019-04-02 | 北京八分量信息科技有限公司 | A kind of data processing system and method based on multi-party computations |
CN109600366A (en) * | 2018-12-06 | 2019-04-09 | 中链科技有限公司 | The method and device of protection user data privacy based on block chain |
CN109597835A (en) * | 2018-10-26 | 2019-04-09 | 平安科技(深圳)有限公司 | Sport resources interactive approach and device based on block chain |
CN110032876A (en) * | 2019-02-19 | 2019-07-19 | 阿里巴巴集团控股有限公司 | Method, node and the storage medium of secret protection are realized in block chain |
CN110232569A (en) * | 2019-05-07 | 2019-09-13 | 北京奇艺世纪科技有限公司 | A kind of read method of transaction record, device and storage medium |
WO2019205860A1 (en) * | 2018-04-27 | 2019-10-31 | 腾讯科技(深圳)有限公司 | Blockchain-based data query method, server and storage medium |
CN110474886A (en) * | 2019-07-24 | 2019-11-19 | 深圳壹账通智能科技有限公司 | Data ciphering method, device, electronic equipment and storage medium based on block chain |
CN110516474A (en) * | 2019-08-27 | 2019-11-29 | 腾讯科技(深圳)有限公司 | User information processing method, device, electronic equipment and storage medium in block chain network |
CN110532323A (en) * | 2019-09-02 | 2019-12-03 | 腾讯科技(深圳)有限公司 | Pupilage information processing method, device, electronic equipment and storage medium in block chain network |
CN110569658A (en) * | 2019-09-12 | 2019-12-13 | 腾讯科技(深圳)有限公司 | User information processing method and device based on block chain network, electronic equipment and storage medium |
CN110597832A (en) * | 2019-09-12 | 2019-12-20 | 腾讯云计算(北京)有限责任公司 | Government affair information processing method and device based on block chain network, electronic equipment and storage medium |
CN110598434A (en) * | 2019-09-12 | 2019-12-20 | 腾讯科技(深圳)有限公司 | House information processing method and device based on block chain network, electronic equipment and storage medium |
CN110716965A (en) * | 2019-09-25 | 2020-01-21 | 支付宝(杭州)信息技术有限公司 | Query method, device and equipment in block chain type account book |
CN110769274A (en) * | 2019-10-18 | 2020-02-07 | 腾讯科技(深圳)有限公司 | Live broadcast information processing method and device based on block chain network, electronic equipment and storage medium |
CN110995757A (en) * | 2019-12-19 | 2020-04-10 | 肖光昱 | Encryption device, encryption system, and data encryption method |
CN111400728A (en) * | 2020-03-05 | 2020-07-10 | 北京金山云网络技术有限公司 | Data encryption and decryption method and device applied to block chain |
CN111523862A (en) * | 2020-04-27 | 2020-08-11 | 广东电网有限责任公司培训与评价中心 | Method for acquiring talent data and related equipment |
CN111782889A (en) * | 2020-07-07 | 2020-10-16 | 北京钢研新材科技有限公司 | Alloy material data sharing method, system and equipment based on block chain |
WO2020224246A1 (en) * | 2019-05-07 | 2020-11-12 | 深圳壹账通智能科技有限公司 | Block chain-based data management method and apparatus, device and storage medium |
CN111966731A (en) * | 2020-10-23 | 2020-11-20 | 支付宝(杭州)信息技术有限公司 | Method and device for querying data in block chain system |
CN112074856A (en) * | 2018-03-06 | 2020-12-11 | 阿梅里科普投资有限责任公司 | Parking system based on block chain |
CN112286997A (en) * | 2020-11-25 | 2021-01-29 | 平安数字信息科技(深圳)有限公司 | Salary data query method based on distributed deployment and related equipment |
CN112328663A (en) * | 2020-11-24 | 2021-02-05 | 深圳市鹰硕技术有限公司 | Data discovery method and system applied to big data |
CN112685389A (en) * | 2021-03-19 | 2021-04-20 | 北京瑞莱智慧科技有限公司 | Data management method, data management device, electronic device, and storage medium |
CN112953930A (en) * | 2021-02-09 | 2021-06-11 | 苏宁易购集团股份有限公司 | Cloud storage data processing method and device and computer system |
CN112995205A (en) * | 2021-04-13 | 2021-06-18 | 北京百度网讯科技有限公司 | Query method, device, equipment and storage medium based on block chain |
US11228596B2 (en) | 2019-03-21 | 2022-01-18 | Advanced New Technologies Co., Ltd. | Data isolation in blockchain networks |
US11689539B2 (en) | 2018-03-06 | 2023-06-27 | Americorp Investments Llc | Blockchain-based commercial inventory systems and methods |
US11700265B2 (en) | 2018-03-06 | 2023-07-11 | Americorp Investments Llc | Customized view of restricted information recorded into a blockchain |
Families Citing this family (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN111478887B (en) * | 2020-03-19 | 2022-04-01 | 深圳市芯链科技有限公司 | Block chain Internet of things system and operation method |
CN112115199A (en) * | 2020-09-16 | 2020-12-22 | 安徽长泰信息安全服务有限公司 | Data management system based on block chain technology |
CN112506987B (en) * | 2020-11-19 | 2022-05-20 | 杭州趣链科技有限公司 | Query method, device and equipment based on block chain and storage medium |
CN113515772B (en) * | 2021-04-20 | 2024-05-28 | 昆明理工大学 | Database query log information uplink method based on RPCA consensus mechanism |
CN114528565B (en) * | 2022-01-21 | 2024-07-05 | 广东海洋大学 | Sensitive data efficient uplink algorithm based on blockchain |
CN114844695B (en) * | 2022-04-28 | 2024-06-25 | 华能招标有限公司 | Business data circulation method, system and related equipment based on block chain |
CN114900535B (en) * | 2022-05-09 | 2023-07-04 | 深圳嘉业产业发展有限公司 | Data transmission method and system based on block chain |
Citations (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20120226889A1 (en) * | 2011-03-01 | 2012-09-06 | Dwight Merriman | System and method for determining exact location results using hash encoding of multi-dimensioned data |
CN103838760A (en) * | 2012-11-23 | 2014-06-04 | 北京神州泰岳软件股份有限公司 | Method and system for inquiring friend information |
CN105488431A (en) * | 2015-11-30 | 2016-04-13 | 布比(北京)网络技术有限公司 | Authority management method and device for block chain system |
CN105760399A (en) * | 2014-12-19 | 2016-07-13 | 华为软件技术有限公司 | Data retrieval method and device |
US20170048253A1 (en) * | 2015-08-11 | 2017-02-16 | CloudMode, LLC | Data resource control data structure and method |
CN106796688A (en) * | 2016-12-26 | 2017-05-31 | 深圳前海达闼云端智能科技有限公司 | Permission control method, device and system of block chain and node equipment |
US20170177898A1 (en) * | 2015-12-16 | 2017-06-22 | International Business Machines Corporation | Personal ledger blockchain |
CN107480555A (en) * | 2017-08-01 | 2017-12-15 | 中国联合网络通信集团有限公司 | Database-access rights control method and equipment based on block chain |
CN107508806A (en) * | 2017-08-11 | 2017-12-22 | 北京理工大学 | Internet financial electronic data safety system and method based on block chain |
CN107679369A (en) * | 2016-08-02 | 2018-02-09 | 华为技术有限公司 | A kind of method, apparatus and system of the licensing of shared digital content |
CN107766542A (en) * | 2017-10-30 | 2018-03-06 | 上海分布信息科技有限公司 | A kind of block chain network of subregion and its method for realizing subregion inquiry |
CN110990407A (en) * | 2018-04-27 | 2020-04-10 | 腾讯科技(深圳)有限公司 | Block chain based data storage method and device, server and storage medium |
Family Cites Families (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10785033B2 (en) * | 2015-09-04 | 2020-09-22 | Nec Corporation | Method for storing an object on a plurality of storage nodes |
CN105516110B (en) * | 2015-12-01 | 2019-12-20 | 趣增信息科技(上海)有限公司 | Mobile device security data transmission method |
US20180046656A1 (en) * | 2016-08-12 | 2018-02-15 | Microsoft Technology Licensing, Llc | Constructing filterable hierarchy based on multidimensional key |
CN106354994B (en) * | 2016-08-22 | 2019-01-18 | 布比(北京)网络技术有限公司 | Handle the method and system of medical data |
CN206479988U (en) * | 2016-11-30 | 2017-09-08 | 谭小刚 | Information for hospital supervising platform |
CN106612285B (en) * | 2016-12-30 | 2020-05-19 | Tcl集团股份有限公司 | Distributed cloud data management method and system based on peer-to-peer network |
CN107451275B (en) * | 2017-08-04 | 2019-08-16 | 北京明朝万达科技股份有限公司 | Business data processing method, device, system and storage equipment based on block chain |
US20190087830A1 (en) * | 2017-09-15 | 2019-03-21 | Pearson Education, Inc. | Generating digital credentials with associated sensor data in a sensor-monitored environment |
CN107592318A (en) * | 2017-09-22 | 2018-01-16 | 深圳中迈数字医疗技术有限公司 | It is a kind of that the shared method and system of clinical data are realized by block chain |
CN107862215B (en) * | 2017-09-29 | 2020-10-16 | 创新先进技术有限公司 | Data storage method, data query method and device |
CN107767926A (en) * | 2017-11-15 | 2018-03-06 | 中国联合网络通信集团有限公司 | Medical data management system and access method based on block chain |
US10805803B1 (en) * | 2019-04-03 | 2020-10-13 | Genfintech, Inc. | Systems and methods for mobile peer-to-peer content sharing |
US11797698B2 (en) * | 2020-06-15 | 2023-10-24 | Concord Technologies Inc. | Decentralized consent network for decoupling the storage of personally identifiable user data from user profiling data |
-
2018
- 2018-04-27 CN CN201810393489.1A patent/CN108563788B/en active Active
- 2018-04-27 CN CN201911206702.4A patent/CN110990407B/en active Active
-
2019
- 2019-03-26 WO PCT/CN2019/079636 patent/WO2019205860A1/en active Application Filing
-
2020
- 2020-06-22 US US16/907,580 patent/US11366924B2/en active Active
Patent Citations (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20120226889A1 (en) * | 2011-03-01 | 2012-09-06 | Dwight Merriman | System and method for determining exact location results using hash encoding of multi-dimensioned data |
CN103838760A (en) * | 2012-11-23 | 2014-06-04 | 北京神州泰岳软件股份有限公司 | Method and system for inquiring friend information |
CN105760399A (en) * | 2014-12-19 | 2016-07-13 | 华为软件技术有限公司 | Data retrieval method and device |
US20170048253A1 (en) * | 2015-08-11 | 2017-02-16 | CloudMode, LLC | Data resource control data structure and method |
CN105488431A (en) * | 2015-11-30 | 2016-04-13 | 布比(北京)网络技术有限公司 | Authority management method and device for block chain system |
US20170177898A1 (en) * | 2015-12-16 | 2017-06-22 | International Business Machines Corporation | Personal ledger blockchain |
CN107679369A (en) * | 2016-08-02 | 2018-02-09 | 华为技术有限公司 | A kind of method, apparatus and system of the licensing of shared digital content |
CN106796688A (en) * | 2016-12-26 | 2017-05-31 | 深圳前海达闼云端智能科技有限公司 | Permission control method, device and system of block chain and node equipment |
CN107480555A (en) * | 2017-08-01 | 2017-12-15 | 中国联合网络通信集团有限公司 | Database-access rights control method and equipment based on block chain |
CN107508806A (en) * | 2017-08-11 | 2017-12-22 | 北京理工大学 | Internet financial electronic data safety system and method based on block chain |
CN107766542A (en) * | 2017-10-30 | 2018-03-06 | 上海分布信息科技有限公司 | A kind of block chain network of subregion and its method for realizing subregion inquiry |
CN110990407A (en) * | 2018-04-27 | 2020-04-10 | 腾讯科技(深圳)有限公司 | Block chain based data storage method and device, server and storage medium |
Non-Patent Citations (2)
Title |
---|
G. ZYSKIND ET,AL: "Decentralizing Privacy: Using Blockchain to Protect Personal Data" * |
蔡维德等: "面向大数据的区块链在清算***中的应用", 《大数据》 * |
Cited By (51)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11689539B2 (en) | 2018-03-06 | 2023-06-27 | Americorp Investments Llc | Blockchain-based commercial inventory systems and methods |
CN112074856B (en) * | 2018-03-06 | 2021-10-08 | 阿梅里科普投资有限责任公司 | Block chain based business inventory system and method |
US11706228B2 (en) | 2018-03-06 | 2023-07-18 | Americorp Investments Llc | Customized view of restricted information recorded into a blockchain |
US11700265B2 (en) | 2018-03-06 | 2023-07-11 | Americorp Investments Llc | Customized view of restricted information recorded into a blockchain |
CN112074856A (en) * | 2018-03-06 | 2020-12-11 | 阿梅里科普投资有限责任公司 | Parking system based on block chain |
US11366924B2 (en) | 2018-04-27 | 2022-06-21 | Tencent Technology (Shenzhen) Company Ltd | Block chain-based data query method, server and storage medium |
WO2019205860A1 (en) * | 2018-04-27 | 2019-10-31 | 腾讯科技(深圳)有限公司 | Blockchain-based data query method, server and storage medium |
CN109361738A (en) * | 2018-09-25 | 2019-02-19 | 安徽灵图壹智能科技有限公司 | A kind of identity authorization system and method based on block chain network |
CN109493093A (en) * | 2018-09-26 | 2019-03-19 | 百度在线网络技术(北京)有限公司 | User behavior information processing method and device based on block chain |
CN109213797A (en) * | 2018-09-30 | 2019-01-15 | 中国联合网络通信集团有限公司 | A kind of querying method and device of block chain |
CN109325870A (en) * | 2018-10-10 | 2019-02-12 | 上海保险交易所股份有限公司 | The method and system of shared private data |
CN109597835A (en) * | 2018-10-26 | 2019-04-09 | 平安科技(深圳)有限公司 | Sport resources interactive approach and device based on block chain |
CN109597835B (en) * | 2018-10-26 | 2024-02-23 | 平安科技(深圳)有限公司 | Sports resource interaction method and device based on block chain |
CN109558422A (en) * | 2018-10-29 | 2019-04-02 | 平安科技(深圳)有限公司 | Based on the driver's license archive management method of block chain, device, computer equipment |
CN109558750A (en) * | 2018-11-30 | 2019-04-02 | 北京八分量信息科技有限公司 | A kind of data processing system and method based on multi-party computations |
CN109558750B (en) * | 2018-11-30 | 2021-11-02 | 北京八分量信息科技有限公司 | Data processing system and method based on secure multi-party computing |
CN109600366A (en) * | 2018-12-06 | 2019-04-09 | 中链科技有限公司 | The method and device of protection user data privacy based on block chain |
CN109559231A (en) * | 2018-12-29 | 2019-04-02 | 华东师范大学 | A kind of retrospect querying method towards block chain |
CN110032876A (en) * | 2019-02-19 | 2019-07-19 | 阿里巴巴集团控股有限公司 | Method, node and the storage medium of secret protection are realized in block chain |
US11265322B2 (en) | 2019-03-21 | 2022-03-01 | Advanced New Technologies Co., Ltd. | Data isolation in blockchain networks |
US11228596B2 (en) | 2019-03-21 | 2022-01-18 | Advanced New Technologies Co., Ltd. | Data isolation in blockchain networks |
CN110232569A (en) * | 2019-05-07 | 2019-09-13 | 北京奇艺世纪科技有限公司 | A kind of read method of transaction record, device and storage medium |
WO2020224246A1 (en) * | 2019-05-07 | 2020-11-12 | 深圳壹账通智能科技有限公司 | Block chain-based data management method and apparatus, device and storage medium |
CN110232569B (en) * | 2019-05-07 | 2021-04-16 | 北京奇艺世纪科技有限公司 | Method and device for reading transaction record and storage medium |
CN110474886A (en) * | 2019-07-24 | 2019-11-19 | 深圳壹账通智能科技有限公司 | Data ciphering method, device, electronic equipment and storage medium based on block chain |
CN110474886B (en) * | 2019-07-24 | 2022-04-05 | 深圳壹账通智能科技有限公司 | Block chain based data encryption method and device, electronic equipment and storage medium |
CN110516474B (en) * | 2019-08-27 | 2024-06-28 | 腾讯科技(深圳)有限公司 | User information processing method and device in blockchain network, electronic equipment and storage medium |
CN110516474A (en) * | 2019-08-27 | 2019-11-29 | 腾讯科技(深圳)有限公司 | User information processing method, device, electronic equipment and storage medium in block chain network |
CN110888938A (en) * | 2019-09-02 | 2020-03-17 | 腾讯科技(深圳)有限公司 | Student identity information processing method and device based on block chain network |
CN110532323A (en) * | 2019-09-02 | 2019-12-03 | 腾讯科技(深圳)有限公司 | Pupilage information processing method, device, electronic equipment and storage medium in block chain network |
CN110569658B (en) * | 2019-09-12 | 2024-06-14 | 腾讯科技(深圳)有限公司 | User information processing method and device based on blockchain network, electronic equipment and storage medium |
CN110598434B (en) * | 2019-09-12 | 2023-08-15 | 腾讯科技(深圳)有限公司 | House information processing method and device based on blockchain network, electronic equipment and storage medium |
CN110569658A (en) * | 2019-09-12 | 2019-12-13 | 腾讯科技(深圳)有限公司 | User information processing method and device based on block chain network, electronic equipment and storage medium |
CN110597832A (en) * | 2019-09-12 | 2019-12-20 | 腾讯云计算(北京)有限责任公司 | Government affair information processing method and device based on block chain network, electronic equipment and storage medium |
CN110598434A (en) * | 2019-09-12 | 2019-12-20 | 腾讯科技(深圳)有限公司 | House information processing method and device based on block chain network, electronic equipment and storage medium |
CN110716965A (en) * | 2019-09-25 | 2020-01-21 | 支付宝(杭州)信息技术有限公司 | Query method, device and equipment in block chain type account book |
CN110769274A (en) * | 2019-10-18 | 2020-02-07 | 腾讯科技(深圳)有限公司 | Live broadcast information processing method and device based on block chain network, electronic equipment and storage medium |
CN110995757A (en) * | 2019-12-19 | 2020-04-10 | 肖光昱 | Encryption device, encryption system, and data encryption method |
CN110995757B (en) * | 2019-12-19 | 2022-03-11 | 肖光昱 | Encryption device, encryption system, and data encryption method |
CN111400728A (en) * | 2020-03-05 | 2020-07-10 | 北京金山云网络技术有限公司 | Data encryption and decryption method and device applied to block chain |
CN111523862A (en) * | 2020-04-27 | 2020-08-11 | 广东电网有限责任公司培训与评价中心 | Method for acquiring talent data and related equipment |
CN111523862B (en) * | 2020-04-27 | 2024-02-23 | 广东电网有限责任公司培训与评价中心 | Method and related equipment for acquiring talent data |
CN111782889A (en) * | 2020-07-07 | 2020-10-16 | 北京钢研新材科技有限公司 | Alloy material data sharing method, system and equipment based on block chain |
CN111966731A (en) * | 2020-10-23 | 2020-11-20 | 支付宝(杭州)信息技术有限公司 | Method and device for querying data in block chain system |
CN112328663A (en) * | 2020-11-24 | 2021-02-05 | 深圳市鹰硕技术有限公司 | Data discovery method and system applied to big data |
CN112286997B (en) * | 2020-11-25 | 2024-04-16 | 深圳平安智汇企业信息管理有限公司 | Salary data query method based on distributed deployment and related equipment |
CN112286997A (en) * | 2020-11-25 | 2021-01-29 | 平安数字信息科技(深圳)有限公司 | Salary data query method based on distributed deployment and related equipment |
CN112953930A (en) * | 2021-02-09 | 2021-06-11 | 苏宁易购集团股份有限公司 | Cloud storage data processing method and device and computer system |
CN112685389B (en) * | 2021-03-19 | 2021-06-29 | 北京瑞莱智慧科技有限公司 | Data management method, data management device, electronic device, and storage medium |
CN112685389A (en) * | 2021-03-19 | 2021-04-20 | 北京瑞莱智慧科技有限公司 | Data management method, data management device, electronic device, and storage medium |
CN112995205A (en) * | 2021-04-13 | 2021-06-18 | 北京百度网讯科技有限公司 | Query method, device, equipment and storage medium based on block chain |
Also Published As
Publication number | Publication date |
---|---|
CN110990407A (en) | 2020-04-10 |
WO2019205860A1 (en) | 2019-10-31 |
US11366924B2 (en) | 2022-06-21 |
CN108563788B (en) | 2023-05-23 |
US20200320217A1 (en) | 2020-10-08 |
CN110990407B (en) | 2020-11-10 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN108563788A (en) | Data query method, apparatus, server and storage medium based on block chain | |
US11263344B2 (en) | Data management method and registration method for an anonymous data sharing system, as well as data manager and anonymous data sharing system | |
JP2019160312A (en) | Blockchain node, method of blockchain node, and computer program for blockchain node | |
US8620882B2 (en) | Tokenization of multiple-field records | |
US11810676B2 (en) | Verified permissioned blockchains | |
KR102310227B1 (en) | System and method for retrieval of medical information using blockchain and computer program for the same | |
CN109547477A (en) | A kind of data processing method and its device, medium, terminal | |
CN111881481B (en) | Medical data processing method, device, equipment and storage medium based on blockchain | |
CN108573741A (en) | Business datum recording method, device, equipment and storage medium | |
CN108769230A (en) | Transaction data storage method, device, server and storage medium | |
CN109241352A (en) | The acquisition methods and server of Profile information | |
CN109325366B (en) | Service processing method and device based on alliance chain and computer readable storage medium | |
KR20200097773A (en) | Blockchain-based identity system | |
WO2024139494A1 (en) | Sensitive data management method and system | |
CN113688430A (en) | Block chain-based data access authorization method, device, equipment and storage medium | |
KR102271201B1 (en) | Method for maintaining private information on blockchain network and device thereof | |
CN110301127A (en) | Device and method for predictive token authentication | |
CN109828832A (en) | Data circulation method, device, equipment and medium based on block chain | |
CN114117540B (en) | Big data analysis processing method and system | |
US7844267B2 (en) | Server for providing access by a communication terminal to a communication processing service | |
CN113642027B (en) | Medical information integration method, device, computer equipment, medium and system | |
CN117786756B (en) | Method and system for realizing safe sharing of user patient data based on skin database | |
EP1415432A1 (en) | Method for secure transfer of information | |
CN117034370B (en) | Data processing method based on block chain network and related equipment | |
US11468525B2 (en) | Coordination platform for generating and managing authority tokens |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |